1. Basic Policy

Mega Co., Ltd. recognizes the importance of personal information and considers the protection of such information to be a social responsibility. We comply with all applicable laws and regulations concerning personal information and hereby establish the following Privacy Policy. We declare our commitment, as a company-wide initiative, to ensure the proper handling and strict protection of personal information.

1. We collect, use, and provide personal information appropriately in order to deliver comprehensive business support services related to offices and retail spaces, as well as social support services that address diverse societal needs.
2. We appoint a Personal Information Protection Manager to ensure proper management. We implement appropriate preventive measures and corrective actions against unauthorized access, loss, destruction, falsification, and leakage of personal information.
3. We comply with all applicable laws, regulations, and other standards regarding personal information.
4. We continuously review and improve our management systems and measures for the protection of personal information.

2. Scope of Application

This Privacy Policy sets forth the principles that Mega Co., Ltd. complies with when handling personal information or information equivalent thereto in the course of its various business activities. This applies to the personal information of customers, related parties (including business partners and affiliated organizations), and employees.

3. Handling of Personal Information

We acquire personal information through lawful and appropriate means.

The personal information obtained will be used only for the purposes listed below. Except where permitted by law, we will not use such information beyond these purposes without obtaining prior consent from the individual concerned. If we specifically inform the individual of the purpose of use at the time of acquisition, we will use the personal information within the scope of that stated purpose.

1. Provision of products and services
2. Accounting, bookkeeping, and document preparation
3. Investigation, handling, and reporting of troubles or accidents
4. After-sales services
5. Conducting surveys and monitoring for product development
6. Aggregation and analysis of survey results
7. Preparation of statistical materials
8. Providing information via email, direct mail, or other means, including proposals regarding products and services handled by our company
9. Providing proposals and information regarding repair, support, and maintenance of products handled by our company
10. Providing information about campaigns, fairs, and events
11. Providing information regarding surveys and monitoring programs
12. Business meetings, consultations, and communications with customers
13. Other administrative and operational management related to customers
14. Providing information and communications to business partners
15. Communication, cooperation, negotiation, contract performance, and claims for performance with business partners
16. Proper and smooth execution of outsourced operations when entrusted with the processing of personal information in whole or in part by business partners
17. Sending or providing seasonal greetings and customary gifts
18. Planning, reviewing, organizing, and communicating regarding meetings and roundtable discussions with members of affiliated organizations
19. Sharing information related to business activities with members of affiliated organizations
20. Applications, notifications, and reports to government agencies or organizations related to affiliated organizations

However, in cases where the purpose of use is clearly evident from the circumstances of acquisition, such as the exchange of business cards in customary business practice or receipt of personal information through customer inquiries, we may omit explicit notification of the purpose of use.

Personal information provided will be used only within the scope of the purposes clearly stated in advance and will not be used for any other purpose without the individual's consent.

4. Security Control Measures for Personal Information

We appoint a person responsible for the management of personal information, clearly define their role, and establish an environment that enables them to properly carry out activities related to the protection of personal information.

In addition, to prevent unauthorized access, unlawful use, improper or accidental loss, destruction, or damage of personal information, we implement necessary and appropriate security control measures as follows.

1. Development of internal regulations aimed at ensuring the proper handling and protection of personal information, including the establishment of a Privacy Policy and Information Security Policy
2. Organizational security control measures, including the appointment of a responsible manager for handling personal information in accordance with internal regulations, establishment of a reporting system in the event of leakage or other incidents, and periodic inspections of the handling status of personal information
3. Human security control measures, including the implementation of information security training within the company
4. Physical security control measures, including the management of employee entry and exit
5. Technical security control measures, including the introduction of systems to protect information systems handling personal information from unauthorized external access or malicious software, and the establishment of monitoring systems for access status
6. When handling personal information in foreign countries, understanding the systems related to the protection of personal information in the relevant country and conducting periodic and as-needed reviews of necessary measures to ensure the secure management of personal information

5. Provision of Personal Information to Third Parties

We do not provide personal information received from customers to any third parties.

If we decide to provide personal information to a third party in the future, we will clearly present the information to be provided and the purpose of such provision, and will do so only after obtaining the customer's consent.

In addition, we may outsource the handling of personal information to other service providers within the scope necessary to achieve the stated purposes of use.

6. Joint Use of Personal Information

We may jointly use the personal information we have obtained with Mega Co., Ltd. and its group companies.

If we provide separate notice to the individual at the time of acquiring personal information, such information will be used in accordance with that notice.

7. Disclosure, Correction, Suspension of Use, etc. of Personal Information

If there is a request for disclosure, correction, suspension of use, or related matters regarding personal information, we will respond in accordance with our prescribed procedures.

For specific procedures, we will provide individual guidance on the "Procedures for Disclosure of Personal Information." Please contact the inquiry desk below.

8. Compliance with Laws and Continuous Improvement

We comply with all applicable laws, regulations, and guidelines related to the protection of personal information.

In addition, we will continuously review our internal initiatives concerning personal information protection and strive for ongoing improvement and enhancement of our management systems and practices.

9. Handling of Specific Personal Information

We comply with the My Number Act, the "Guidelines for the Proper Handling of Specific Personal Information (for Business Operators)," and the Act on the Protection of Personal Information, and handle specific personal information appropriately. The specific purposes of use for such information will be notified at the time we request the provision of specific personal information for administrative procedures related to individual numbers conducted by our company.

1. Scope of Application

This Privacy Policy applies to the personal information (such as name, address, telephone number, and email address) provided by customers through the websites managed and operated by Mega Co., Ltd. (hereinafter referred to as "the Company") (hereinafter referred to as "the Website").

If any individual site within the Website (hereinafter referred to as an "Individual Site") specifies provisions that differ from this Privacy Policy, such differing provisions shall take precedence.

2. Collection of Personal Information

(1) In principle, customers may browse the Website without disclosing their personal information. However, when registering as a user, subscribing to email newsletters, or making inquiries to the Company, customers will be required to provide personal information.

(2) We may analyze customers' browsing activity on the Website and use the results solely for improving the Website and for the marketing activities of the Company and its group companies.

3. Use of SSL/TLS

(1) When customers provide personal information through the Website, we use SSL (Secure Sockets Layer)/TLS (Transport Layer Security) encryption or equivalent security technologies to prevent interception by third parties during transmission. Please note that if you use a browser that does not support SSL/TLS or similar technologies, you may not be able to access certain parts of the Website. In rare cases, depending on your computer environment, these technologies may not be available. In such instances, a notice will be displayed indicating that the security of the communication cannot be ensured.

(2) The Website may publish our email address to receive inquiries from customers via email. Please be aware that inquiries sent by email are not encrypted during transmission, and there is a possibility that the content may be intercepted and read by unauthorized third parties. By using email inquiries, you acknowledge and accept this risk in advance.

4. Use of Cookies*1, Similar Technologies, and IP Addresses

The Website may use cookies and IP addresses for the following purposes.

• To provide customized services for each customer by referring to stored registration information when logging into authentication services
• To analyze the number of users and traffic on the Website
• To improve our services
• To maintain security by prompting customers to re-enter their passwords (re-authenticate) after a certain period of inactivity
• To utilize browsing history and survey results for marketing activities in services where personal information has been registered in advance

Based on outsourcing arrangements with third parties responsible for advertising distribution, we may allow such third parties to store and reference our cookies via their systems.

You may refuse to accept cookies by changing the settings of your internet browsing software (hereinafter referred to as "browser").

However, please note that if you disable cookies, certain functions such as customized features may not be available, and you may be unable to use services requiring authentication, which could result in restrictions when using various internet services.

5. Use of Google Analytics

The Website may use Google Analytics to understand usage conditions. Google Analytics uses first-party cookies to collect access information to our Website without identifying individuals.

The methods of collecting and using access information are defined by the Google Analytics Terms of Service and the Google Privacy Policy.

For details about Google Analytics, please refer to the following page.

【Google Analytics】

6. Handling of Linked Websites

This Privacy Policy does not apply to other websites linked from the Website. Please refer to the privacy policies or other relevant policies of those websites regarding the handling of personal information.

*1 "Cookies" are a mechanism that stores a user's browsing history on their computer. Users can refuse the collection of cookies by disabling them in their browser settings. Please check your browser settings for details. However, if cookies are disabled, some services or functions of the Website may not operate properly.

7. Handling of Customer Information in the SPICA/Phone App

In the SPICA/Phone app operated by our group, we obtain the following information about customers and use it for the purposes described below.

<Information Collected>

• Telephone number, MAC address
• Images, audio, video, location information
• PDF files
• Telephone numbers registered in the contact list
• Call history

<Purpose of Use>

• For use as fax transmission documents
• For log analysis

8. Changes to This Privacy Policy

We may change this Website Privacy Policy in response to changes in laws, regulations, or our business activities. Any revised Privacy Policy shall become effective when posted on the Website.